Legal
Privacy notice
What we collect during recruitment, why we hold it, who sees it, how long we keep it, and how to make us delete it.
Last updated 12 October 2026
Who we are
Aurelis Care Services Ltd ("we") runs this careers site. We are the data controller for the personal information you give us when you apply, when you contact us, and when you use this site.
We are registered with Care Quality Commission. Our registered address is 18 Halstead Row, London EC1A 4NP.
What we collect
We collect only what we need to assess you fairly and to keep you informed:
- Your name, email address, telephone number and postcode.
- Your CV and covering message, plus anything else you choose to send us.
- Your NMC or HCPC registration number, if you have one.
- Your answers to our four recruitment questions.
- Records of your enhanced DBS check and right-to-work verification.
- Basic, aggregated usage data about how this site is used, only if you consent to analytics.
Why we are allowed to hold it
For job applicants we rely on steps taken at your request before entering a contract, and on our legitimate interests in running a fair recruitment process.
For successful candidates we rely on the performance of the employment contract and on our legal obligations as a regulated health and social care provider.
For special category data, such as health information you choose to disclose, we rely on your explicit consent. We do not ask for it during the application form.
How long we keep it
Unsuccessful applications are held for six months, then deleted. If you ask us to keep your details for longer so we can contact you about future roles, we will record that consent separately and you can withdraw it at any time.
Records for successful candidates are held for the duration of employment and then for six years, which is the statutory retention period for employment and health and safety records.
Who we share it with
Nobody outside the recruitment and clinical teams who need it to assess your application.
We do not sell your data. We do not pass your CV to recruiters or staffing agencies. We will not share it with another employer.
We use a small number of processors: our hosting provider, our email provider, and the identity verification service that runs our DBS checks. Each is bound by contract to process data only on our instructions.
Your rights
You can ask us to:
- Give you a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete your application, unless we are required to keep it.
- Restrict or object to how we use it.
- Withdraw consent at any time, without affecting anything we did before.
- Complain to the Information Commissioner's Office (ico.org.uk) if you think we have got this wrong.
Keeping this site secure
Traffic to this site is encrypted in transit. Forms are protected by invisible bot checks and are rate limited so that automated abuse cannot exhaust our inbox.
Your CV is stored outside the public web folder and can only be opened by the recruitment team. It is never served from a guessable public URL.
Questions about this policy
Email careers@aureliscare.com or write to us at 18 Halstead Row, London EC1A 4NP.
Contact us